Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
File: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft (raw, json)
Hash identifier: nPEbJhTiBe/WigddWqI2T66Jg1txeeiL4QC3WvBLA58=
Subject key identifier: 92:FD:6C:78:9C:DF:2C:AA:09:B5:4E:DA:7C:C4:19:18:BC:F2:C1:F7
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 0198D515657F56D9E525E24EE44332301821
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
Manifest number: 0BA4
Signing time: Sat 23 Aug 2025 04:00:05 +0000
Manifest this update: Sat 23 Aug 2025 04:00:05 +0000
Manifest next update: Sun 24 Aug 2025 04:00:05 +0000
Files and hashes: 1: DWyS6ktuYXD1HWtRdim_tw6aAHw.roa (hash: ZpPs8QmClGInLrYdfgabA/tiTnRpT7Agrz+vwk6fAyc=)
2: ebklZqmx0-dRJX-3stcdCCjPSZQ.roa (hash: oxCqtL4IdqqluHjcszErTou8uGJlC2MCnMVsPPzgZCM=)
3: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl (hash: tsMvoYXAGKIJJWj8vZw+JqmseqUoVFKMn7cZ2Ndx7Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:65:7f:56:d9:e5:25:e2:4e:e4:43:32:30:18:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: Aug 23 04:00:05 2025 GMT
Not After : Aug 24 04:00:05 2025 GMT
Subject: CN=92fd6c789cdf2caa09b54eda7cc41918bcf2c1f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:da:89:aa:d9:54:f0:aa:b3:ec:99:ef:ca:78:
23:a5:6f:2f:36:ee:77:7b:da:32:21:4f:1e:b2:1b:
2e:64:53:d4:38:af:87:1a:a9:42:3a:68:79:97:76:
9a:a8:ef:30:a7:1e:f2:48:0c:8f:c4:ab:3b:83:8d:
28:4a:d5:1f:a4:15:aa:c5:04:f6:34:b8:bd:eb:85:
45:02:c0:de:d9:71:77:0d:d4:83:30:54:28:b6:b3:
cd:e6:d7:20:bc:8a:6a:53:05:61:b6:b9:77:08:ac:
e4:c9:4b:c4:28:be:13:32:da:ae:b9:02:4e:c4:11:
8f:b9:e1:eb:40:94:6b:73:8c:4e:28:b3:53:2b:6b:
ab:65:c1:52:35:64:26:d7:06:0e:bb:0b:97:db:06:
08:df:d5:4e:2a:7b:90:bb:9e:4f:d9:de:4c:ef:62:
6c:26:b8:df:63:0e:89:8e:d7:fc:31:6a:a0:7b:64:
e2:ca:2f:32:a2:1e:10:0e:1b:c7:14:0d:27:89:70:
56:68:1b:9c:58:f1:d6:cc:0e:d5:b0:05:ea:60:94:
89:2a:01:cc:90:98:a2:dc:a1:93:f3:9f:d4:a9:31:
c2:17:04:8c:b5:8c:23:bb:02:1a:fe:eb:0f:6b:14:
fd:48:32:18:c4:d9:2a:b9:a3:b2:13:e8:9a:60:2a:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:FD:6C:78:9C:DF:2C:AA:09:B5:4E:DA:7C:C4:19:18:BC:F2:C1:F7
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:26:77:7b:36:2c:eb:39:bd:14:1f:1d:92:7c:77:f6:b0:bd:
69:36:76:28:5c:88:df:af:68:f3:64:84:0a:22:e1:db:be:a1:
c5:16:14:33:61:9c:6c:51:01:3b:eb:fb:62:2d:4b:fc:cb:9f:
cc:4f:89:57:78:b6:78:70:17:3b:26:33:f5:37:36:f1:1b:87:
c8:fa:b8:f6:58:23:6a:67:d4:87:f5:32:fd:37:4f:96:4a:a6:
18:10:aa:d5:4e:c9:bb:47:8c:82:59:ad:55:86:b5:63:1d:ee:
c5:c8:a2:44:d5:24:dc:14:ef:00:85:8b:15:34:98:a1:33:18:
40:88:18:22:fe:2b:1f:30:5d:2b:e3:7a:f8:61:ad:4f:9a:69:
7a:27:64:21:55:f9:a6:48:a7:50:6b:70:3c:08:6c:38:8e:a8:
ad:43:f4:33:63:89:7c:7b:45:5e:18:40:82:bf:11:80:a9:03:
77:40:73:a4:04:8d:c6:f4:a9:12:24:0d:2e:bc:c0:70:0c:3d:
87:60:0e:9b:7a:e2:3c:6d:02:3e:57:b1:36:a5:bc:43:a3:b6:
42:51:9e:ee:69:f1:0d:cf:34:7e:3c:a9:fc:3d:16:df:8f:d8:
35:b6:9b:20:ae:33:ce:32:32:9d:d8:0d:ac:a7:fb:2b:23:67:
ab:3b:ff:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:15:14 2025 by rpki-client